CVE-2010-4453
Summary
| CVE | CVE-2010-4453 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-01-19 17:00:02 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container. |
Risk And Classification
Primary CVSS: v2.0 4.3 from [email protected]
AV:N/AC:M/Au:N/C:N/I:P/A:N
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Fusion Middleware | 10.0.2 | All | All | All |
| Application | Oracle | Fusion Middleware | 10.3.2 | All | All | All |
| Application | Oracle | Fusion Middleware | 10.3.3 | All | All | All |
| Application | Oracle | Fusion Middleware | 7.0.7 | All | All | All |
| Application | Oracle | Fusion Middleware | 8.1.6 | All | All | All |
| Application | Oracle | Fusion Middleware | 9.0 | All | All | All |
| Application | Oracle | Fusion Middleware | 9.1 | All | All | All |
| Application | Oracle | Fusion Middleware | 9.2.4 | All | All | All |
| Application | Oracle | Weblogic Server | 10.0.2 | All | All | All |
| Application | Oracle | Weblogic Server | 10.3.2.0.0 | All | All | All |
| Application | Oracle | Weblogic Server | 10.3.3.0.0 | All | All | All |
| Application | Oracle | Weblogic Server | 7.0.7 | All | All | All |
| Application | Oracle | Weblogic Server | 8.1.6 | All | All | All |
| Application | Oracle | Weblogic Server | 9.0 | All | All | All |
| Application | Oracle | Weblogic Server | 9.1 | All | All | All |
| Application | Oracle | Weblogic Server | 9.2.4 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| osvdb.org/70584 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| Oracle WebLogic Server Three Vulnerabilities - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SecurityTracker: Oracle Fusion Middleware Flaws Let Remote Users Execute Arbitrary Code, Access and Modify Data, and Deny Service | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Oracle Critical Patch Update Pre-Release Announcement - January 2011 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Vendor Advisory |
| Oracle Fusion Middleware CVE-2010-4453 Remote Oracle WebLogic Server Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.